Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/crVUjlmvSCSiWoSZ5fKxjBz4rfQ.roa
File: crVUjlmvSCSiWoSZ5fKxjBz4rfQ.roa (raw, json)
Hash identifier: LgjtoKEKlXPILcE2TNbTW4qUnNyI2awOU+z8JoREf6M=
Subject key identifier: 72:B5:54:8E:59:AF:48:24:A2:5A:84:99:E5:F2:B1:8C:1C:F8:AD:F4
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01933EF0F92DC183E8AF10AE984474EE9899
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/crVUjlmvSCSiWoSZ5fKxjBz4rfQ.roa
Signing time: Mon 18 Nov 2024 11:03:19 +0000
ROA not before: Mon 18 Nov 2024 11:03:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216435
IP address blocks: 2a06:cac0::/29 maxlen: 48
2a11:f140::/29 maxlen: 48
2a12:ec0::/29 maxlen: 48
2a12:1900::/29 maxlen: 48
2a12:28c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:f0:f9:2d:c1:83:e8:af:10:ae:98:44:74:ee:98:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Nov 18 11:03:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72b5548e59af4824a25a8499e5f2b18c1cf8adf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:74:8e:97:41:76:78:c2:1a:d1:b0:4c:91:
95:55:98:52:61:e8:22:69:35:32:ff:8a:60:5b:57:
67:5e:cb:8d:ae:96:3f:54:94:1f:88:22:83:c7:e2:
00:af:6e:08:35:d4:21:ee:7d:b6:3a:b3:cf:0c:55:
d3:bf:52:47:28:4b:7f:69:26:96:0f:79:3b:a9:88:
ef:dd:3f:4d:56:32:17:64:33:34:6a:51:30:15:6b:
4e:83:a6:22:06:fc:82:ba:38:79:8c:c0:1e:e3:62:
1f:fb:4b:f8:e6:93:8a:1c:84:82:c5:f8:dc:dc:2c:
8f:23:68:43:c6:87:ab:6a:e5:1f:f9:fc:d8:d6:19:
41:56:73:52:f7:24:a2:bd:67:48:27:b7:3c:3c:bc:
0f:9d:a1:40:bd:96:6c:3b:91:b3:7f:2f:d8:58:77:
96:10:84:04:e3:8c:cc:61:fe:a6:a8:4c:dc:91:c9:
b8:c4:62:cf:3e:9c:31:90:c1:53:47:7d:5e:27:f7:
ed:f3:27:94:c2:2b:58:6a:94:e2:98:d4:08:25:23:
f6:2f:e1:0b:53:95:61:b5:fd:99:89:07:58:0c:db:
42:4b:b6:ca:e5:93:97:a6:a7:ac:f0:ea:af:db:6e:
13:67:fe:23:5f:13:20:11:e4:46:a3:d4:85:d2:34:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B5:54:8E:59:AF:48:24:A2:5A:84:99:E5:F2:B1:8C:1C:F8:AD:F4
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/crVUjlmvSCSiWoSZ5fKxjBz4rfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:cac0::/29
2a11:f140::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:7d:f3:0b:14:d9:70:b3:84:91:7a:75:cc:8e:a7:63:2c:e6:
7f:9e:ef:f7:6b:20:4d:90:04:7b:34:0c:cc:d0:54:02:71:0e:
46:a5:f2:37:80:22:84:1b:bb:83:7d:e5:f5:0a:fc:86:02:4a:
02:25:9d:ab:7b:db:ce:ea:0a:ed:6e:ef:0e:87:d4:68:4e:2c:
d4:b6:b4:77:a3:d2:2c:4e:8d:cc:4d:7f:5d:1d:5f:81:69:9a:
af:f5:b9:24:ea:54:50:83:29:5b:26:8d:83:32:81:df:a6:16:
f4:8c:c5:16:92:0d:84:f3:e8:3b:69:1d:d3:d4:29:ef:22:23:
91:9b:63:da:b1:65:27:41:c7:bb:87:a5:60:51:c7:3e:b4:83:
31:f9:5a:a2:b4:92:ed:c1:df:39:0a:58:6b:9d:d6:09:ce:b2:
8e:74:43:c4:9d:03:fc:ed:27:b4:b2:df:29:e9:8c:1b:5c:43:
c6:03:22:97:88:3e:fa:45:4b:a9:44:dc:58:da:4e:15:3a:26:
eb:25:ba:53:64:d9:4c:76:7d:72:31:b4:9f:22:fe:c6:e5:d9:
72:1f:04:f4:56:66:d7:7b:38:bd:31:54:a8:1b:7c:5f:8f:40:
1a:d0:1d:a5:d7:3c:fb:08:6e:8d:a9:24:32:a0:ce:b1:9a:7b:
4a:ee:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:53:22 2024 by rpki-client on console-ams.rpki-client.org